maple110011/dsh-obsidian-math
C3面向数学笔记的 DeepSeek Harness 助手，驻留在 Obsidian 右侧栏。可直接读写数学笔记，维护分层长期记忆（画像、主题、类型化记录、原始证据），按 Rethlas 风格证明工作流工作，内置个人定理索引与问题模板库，并能把关键想法捕捉到备忘录、主动提醒打磨。
★ 1+ · maple110011/dsh-obsidian-math source on GitHub · this plugin in the registry
maple110011/dsh-obsidian-math is a DeepSeek Harness plugin rated C3 — powerful capability combined with sensitive behavior. It runs code at install time, can rewrite the system prompt, executes system commands, starts a network server.
What it can do
| Capability | Flag | Evidence |
|---|---|---|
| runs code at install time | install_script | postinstall: node dsh/install.mjs install --quiet |
| can rewrite the system prompt | prompt_surface | systemPrompt, system-prompt/assemble |
| executes system commands | exec | ×20 src, e.g. main.js:10, main.js:10 |
| starts a network server | net_server | ×4 src, e.g. main.js:250, main.js:340 |
| reads credential-class env vars | token_env | DSH_OBSIDIAN_FEEDBACK_TOKEN |
Services it injects
fs loader systemPrompt tools workspaceRegistry
Hooks it attaches
system-prompt/assemble
Environment variables it reads
DSH_HOME DSH_OBSIDIAN_VAULT DSH_OBSIDIAN_LINK_URL DSH_OBSIDIAN_FEEDBACK_TOKEN DSH_SESSIONS_ROOT DSH_NODE_BIN APPDATA DSH_PERMISSION_MODE DSH_BIN
How to read this
Levels measure capability surface and transparency, not maliciousness. A C3 plugin can be entirely legitimate — a desktop shell genuinely needs subprocesses. The point is that you can see this before installing. See the levels explained and how dsh plugins work.
Findings come from static analysis of shipped code; nothing is executed. Think a flag is wrong? Open an issue — every flag cites the file and line it came from.